Technology (Consumer Data Protection)

H 744 establishes rules for commercial use of biometric identifiers (like fingerprints, facial scans, or voiceprints) in Idaho. It requires businesses to get explicit consent before collecting such data and prohibits selling or sharing it without specific exceptions (e.g., for financial transactions or law enforcement with a warrant). Businesses must store biometric data securely, destroy it within one year after its purpose expires (or upon user revocation of consent), and face civil penalties up to $25,000 per violation. The law excludes financial institutions and certain AI development activities from its requirements. It takes effect July 1, 2026.